
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft
File: mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft (raw, json)
Hash identifier: COQZrWQ8xLX4y5UmQMQvMOha6Yza8R19WSl5d1JrxYg=
Subject key identifier: CB:98:25:CD:36:DD:2C:8C:82:A0:68:6C:A3:9C:7E:A0:4C:B4:7C:DD
Authority key identifier: 98:61:20:E1:94:31:E2:C3:FE:99:65:03:BE:70:07:22:13:54:97:90
Certificate issuer: /CN=A91B0B89/serialNumber=986120E19431E2C3FE996503BE70072213549790
Certificate serial: 26
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft
Manifest number: 24
Signing time: Sat 11 Jul 2026 09:49:48 +0000
Manifest this update: Sat 11 Jul 2026 09:49:48 +0000
Manifest next update: Sat 18 Jul 2026 09:49:48 +0000
Files and hashes: 1: mGEg4ZQx4sP-mWUDvnAHIhNUl5A.crl (hash: OScmYDkONXNkuJzhmw2FQ9KSduKo5n5fP97YLzWuIdk=)
2: 9D93B6606CBC11F195C2A0A38947A888.roa (hash: ODjfSxOwFCR/d39ZrZoXNmBMiXhRlrDkuBwkRzEF8QA=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.crl
rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 18 Jul 2026 09:49:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 38 (0x26)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B0B89, serialNumber=986120E19431E2C3FE996503BE70072213549790
Validity
Not Before: Jul 11 09:49:48 2026 GMT
Not After : Jul 18 09:49:48 2026 GMT
Subject: CN=6a5211bc-2065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:42:77:10:0c:0c:a0:b9:8b:42:f5:a0:c4:ad:
c4:92:1d:b4:fa:fb:ce:a1:ab:4f:f2:52:3c:bd:52:
2d:31:d6:f6:7e:f1:26:e5:71:71:b5:2c:ab:8b:f8:
b5:18:d8:eb:f8:e7:9c:24:9b:b8:c2:cc:d2:c8:4b:
a0:5e:8f:0a:4c:bb:e8:c3:fc:ca:03:5f:d8:d9:9f:
fe:dd:03:23:69:78:fe:f2:e7:d3:72:ae:72:8c:f5:
fb:e1:b0:0e:53:d2:16:95:18:82:a4:af:13:5c:5d:
26:6f:64:1c:ec:04:1c:e9:0f:50:17:9c:10:c0:e6:
dd:6f:56:75:ac:7f:2b:41:ac:9f:e7:4f:b3:33:f4:
2b:d3:83:94:0f:72:09:c8:56:d5:87:af:5c:65:69:
1c:38:91:0a:d0:7e:dd:96:b5:00:e2:f0:60:1a:5c:
ab:13:96:93:55:24:51:9c:95:61:d5:15:8b:e2:a6:
10:a4:f7:5a:bd:7c:47:ce:ad:bd:e1:ad:3e:87:db:
44:78:dc:13:60:2e:7b:06:52:8f:07:43:07:80:b2:
89:12:a0:5e:3c:76:0f:98:20:74:a8:a3:d4:5d:2c:
12:36:d4:33:bd:20:41:a4:2b:85:a0:0c:bd:e3:5b:
17:c7:e8:6a:8c:a9:cf:59:2a:77:85:3c:94:5a:4e:
28:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:98:25:CD:36:DD:2C:8C:82:A0:68:6C:A3:9C:7E:A0:4C:B4:7C:DD
X509v3 Authority Key Identifier:
keyid:98:61:20:E1:94:31:E2:C3:FE:99:65:03:BE:70:07:22:13:54:97:90
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0B89/F2B097BA492811F1847458F6A5833773/mGEg4ZQx4sP-mWUDvnAHIhNUl5A.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
5a:d6:12:10:00:76:00:de:0b:d9:3b:27:93:0f:be:98:ff:8b:
11:e8:70:9b:13:63:5f:cc:3b:71:de:01:8b:50:52:a4:99:98:
d4:44:7f:32:e5:9a:dd:ff:94:36:bc:19:80:1e:ad:28:34:0d:
96:fc:2f:30:4d:a7:68:f2:5b:a3:32:b2:d9:57:51:46:1e:9e:
19:ef:b1:b3:7b:70:f8:d3:35:e7:24:75:68:0a:e6:96:a4:44:
a7:92:d1:f4:37:d9:23:c1:07:0b:29:d9:47:02:ab:85:a6:52:
16:89:e3:72:6b:72:ec:29:34:03:6c:d4:28:cd:13:38:21:55:
e7:79:0d:15:07:64:75:ba:f1:d4:15:74:f8:67:37:06:1c:72:
17:d7:9d:30:3a:34:79:f2:70:84:f5:87:4e:ae:61:c6:24:c4:
e6:42:43:63:6b:57:09:63:0a:5e:a9:76:f5:d8:f2:b7:e6:2b:
ce:0a:18:a6:d8:8c:4f:3d:b6:30:bb:b4:e9:bc:22:6a:88:5a:
3f:0a:6b:c8:d2:49:b7:f0:3c:8a:c4:d4:99:e8:5b:d4:a2:2a:
5c:3a:d3:0a:59:af:ba:34:14:6c:1e:f2:1a:7b:6d:dc:16:0a:
e3:72:ef:98:4a:2d:b4:e0:81:c9:1c:c9:86:83:b1:18:21:e0:
47:13:b4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 16:28:13 2026 by rpki-client